Analysis

  • max time kernel
    179s
  • max time network
    188s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    17/06/2024, 04:40

General

  • Target
    b6ce7d4d35d5cd390b1d71b6585de8db_JaffaCakes118.apk
  • Size 12.1MB
  • Sample240617-fa28ysvdla
  • SHA256 6da84996845fde20db45391351da159855ea071641b079eec3ff8b9b5f396e61
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs
  • Requests dangerous framework permissions 6 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.mfqbzs.reader
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current nearby Wi-Fi networks
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5034
  • com.mfqbzs.reader:GuardService
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5154

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libjiagu.so

        • Path /data/data/com.mfqbzs.reader/.jiagu/libjiagu.so
        • Size 482KB
        • SHA256 8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc
        • MD5 SHA1 SHA512 SSDEEP

        btechainh.db

        • Path /data/data/com.mfqbzs.reader/databases/btechainh.db
        • Size 20KB
        • SHA256 07d9ea4563fc8906244dfb972918a1c030c8caa0c5d4fcc378106570fab4e9c3
        • MD5 SHA1 SHA512 SSDEEP

        btechainh.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/btechainh.db-journal
        • Size 512B
        • SHA256 a6084ac97d3eb02b73f08ebb0a219beb1f7966787b25553aa7dea3e06a2545d4
        • MD5 SHA1 SHA512

        btechainh.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/btechainh.db-journal
        • Size 8KB
        • SHA256 2e7e9571bb3c6816e987e02b907e2063fc267dbce0afa7b2c9781c7447868671
        • MD5 SHA1 SHA512 SSDEEP

        btechainh.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/btechainh.db-journal
        • Size 8KB
        • SHA256 278776838435ac4c43446a8b7d841331202db52553a76ddd90a0f224c6e81428
        • MD5 SHA1 SHA512 SSDEEP

        easouBook.db

        • Path /data/data/com.mfqbzs.reader/databases/easouBook.db
        • Size 36KB
        • SHA256 4f695ec4765b39b1cd65bba39d1b88e0c228c0878c43d2e4e20e80ebc38e203d
        • MD5 SHA1 SHA512 SSDEEP

        easouBook.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/easouBook.db-journal
        • Size 512B
        • SHA256 997be557174c2156b2bfdf61f1c63007b1916ff904a4a0fd87732e447a22b458
        • MD5 SHA1 SHA512

        easouBook.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/easouBook.db-journal
        • Size 8KB
        • SHA256 ba086b6177856bce1218956c198f328869e1624589369d82bdcc6e335d44380a
        • MD5 SHA1 SHA512 SSDEEP

        easouBook.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/easouBook.db-journal
        • Size 8KB
        • SHA256 8ae532aec5f915f4337c45a2a92e3ed6e9ea4d8260e33003e7fdd4bd79a3f8e5
        • MD5 SHA1 SHA512 SSDEEP

        es.db

        • Path /data/data/com.mfqbzs.reader/databases/es.db
        • Size 20KB
        • SHA256 37db9dafadab1599952db2917dce6d2ca76e9e60cd19f90fb0c14594fde34823
        • MD5 SHA1 SHA512 SSDEEP

        es.db

        • Path /data/data/com.mfqbzs.reader/databases/es.db
        • Size 4KB
        • SHA256 380e44a46eab649a5f7b9739f6c2557dda03447ac33bbbccf6ebfd038f630900
        • MD5 SHA1 SHA512

        es.db

        • Path /data/data/com.mfqbzs.reader/databases/es.db
        • Size 4KB
        • SHA256 22faf6cb0bf72f29763a82cea71dba783c48cec991cd842dbc1e71a2dd27fbd9
        • MD5 SHA1 SHA512

        es.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/es.db-journal
        • Size 512B
        • SHA256 d56e87f1f8514099ddf67ec233ec7a429096bd0d5576f16d3e3a9a47d69019ec
        • MD5 SHA1 SHA512

        es.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/es.db-journal
        • Size 8KB
        • SHA256 05024fa166bbc2c4ca65f752b02f4b780e63b696b46956dfe4392c84086eaeff
        • MD5 SHA1 SHA512 SSDEEP

        es.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/es.db-journal
        • Size 8KB
        • SHA256 641fc1857711c6440fb688c74ae8cb066f285d3bdf76c00397915bc0f4622875
        • MD5 SHA1 SHA512 SSDEEP

        es.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/es.db-journal
        • Size 4KB
        • SHA256 8b228540eaf0383a20af2bb8e8a3a6d3445caeba4a046eb4b60d8f3d1c0a4c84
        • MD5 SHA1 SHA512 SSDEEP

        es.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/es.db-journal
        • Size 4KB
        • SHA256 a7d1e7c25018e1a1d2532c0034f76c8d724eea42a6a8adca6d7840cae0a907ac
        • MD5 SHA1 SHA512 SSDEEP

        es.db-shm

        • Path /data/data/com.mfqbzs.reader/databases/es.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        eventInfo.db

        • Path /data/data/com.mfqbzs.reader/databases/eventInfo.db
        • Size 20KB
        • SHA256 56b461955e83d90edfde518a1a927483891c2833ddff8793e21113e4d229f2e4
        • MD5 SHA1 SHA512 SSDEEP

        eventInfo.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-journal
        • Size 512B
        • SHA256 8dcfe709804c96163d3c6aec315b388b6aa4b9d2cfdbeb4b146d47e961741494
        • MD5 SHA1 SHA512

        eventInfo.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-journal
        • Size 8KB
        • SHA256 0173529be35890c3959d45a8d955a11860adf00266e5321dee79e589f8060b22
        • MD5 SHA1 SHA512 SSDEEP

        eventInfo.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/eventInfo.db-journal
        • Size 8KB
        • SHA256 3e0082c9b119f830af6aaa67215ad9c2b2fd38314c726b41d8a1a176bfd58484
        • MD5 SHA1 SHA512 SSDEEP

        local.db

        • Path /data/data/com.mfqbzs.reader/databases/local.db
        • Size 20KB
        • SHA256 661a1035443118ae4746d858dc4e1c99a92dad7d5d9fc7c9b854c2f93b938140
        • MD5 SHA1 SHA512 SSDEEP

        local.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/local.db-journal
        • Size 512B
        • SHA256 5e02ec4e840cded2e7c698f03cebce37b1464ac5cf88ba7599a278af824c7003
        • MD5 SHA1 SHA512

        local.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/local.db-journal
        • Size 8KB
        • SHA256 806b98ce4bffb552c7012f73a8f4a69c3dd887a7bea6b4b71a50ecb139344396
        • MD5 SHA1 SHA512 SSDEEP

        local.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/local.db-journal
        • Size 8KB
        • SHA256 b68e9991c9476540b00dc7c5e0184f8f9a7a610ea8e5252adde5558190f6c05a
        • MD5 SHA1 SHA512 SSDEEP

        localEasouBook.db

        • Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db
        • Size 24KB
        • SHA256 8d32c7d691e574d08c258947b43af6b175efb6b9d2bfe8a716eb8cbad34a2e8e
        • MD5 SHA1 SHA512 SSDEEP

        localEasouBook.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-journal
        • Size 512B
        • SHA256 70f41de918b281bc91483bd1f777c37c4d7b2b0a22e5a11b9dc06b2d3d63c080
        • MD5 SHA1 SHA512

        localEasouBook.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-journal
        • Size 8KB
        • SHA256 3473c46a4fe147e7ffbb5f166170c4fd9ac816f7fac28d6291998971dded72c1
        • MD5 SHA1 SHA512 SSDEEP

        localEasouBook.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/localEasouBook.db-journal
        • Size 8KB
        • SHA256 e95d631a8dd5ab17c3de5abeb031eb2e284cd69f6ae3b565b7fc571be5fc05e9
        • MD5 SHA1 SHA512 SSDEEP

        techain_d.db

        • Path /data/data/com.mfqbzs.reader/databases/techain_d.db
        • Size 24KB
        • SHA256 8ded5c9e9b0ad4571663013f1fa1815f2c1a6506b53033d5789952720c286ac4
        • MD5 SHA1 SHA512 SSDEEP

        techain_d.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
        • Size 512B
        • SHA256 d4ada03dfeb8e1f5c2c0521649ab7529c5100df7c8064de58e4fca8c8032b7d1
        • MD5 SHA1 SHA512

        techain_d.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
        • Size 8KB
        • SHA256 d614e4030f8e229516ae38d5e2e65b723b562348fd73af60cabd8978fb368f84
        • MD5 SHA1 SHA512 SSDEEP

        techain_d.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
        • Size 8KB
        • SHA256 62cf7356d2e1eb62bff90ca4ef7c4dfc2e96e67a17dc09918f4abce7cbcb7864
        • MD5 SHA1 SHA512 SSDEEP

        techain_d.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
        • Size 12KB
        • SHA256 738de92a3e080cc5aff577ea49c4de92128dffa718db8c364c36ff3dab0dccef
        • MD5 SHA1 SHA512 SSDEEP

        techain_d.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
        • Size 12KB
        • SHA256 69a3e2c013623b1236410d13b669ceebb2e5d783313167f7eae6830d138ed45f
        • MD5 SHA1 SHA512 SSDEEP

        techain_d.db-journal

        • Path /data/data/com.mfqbzs.reader/databases/techain_d.db-journal
        • Size 12KB
        • SHA256 d2144d838a454ffb20286c40434a134cbc29678458484ca8011774b54ba204da
        • MD5 SHA1 SHA512 SSDEEP

        u.dbv5

        • Path /data/data/com.mfqbzs.reader/databases/u.dbv5
        • Size 56KB
        • SHA256 3b32fdba75a3168168865aa91b6ba5bc432a28f381d28c9c54bbb7224eb98f12
        • MD5 SHA1 SHA512 SSDEEP

        u.dbv5-journal

        • Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
        • Size 512B
        • SHA256 93e7d8ea434ad7d4292142591eafb50a565001f715f1c886a8620922ea8dfdf7
        • MD5 SHA1 SHA512

        u.dbv5-journal

        • Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
        • Size 8KB
        • SHA256 3815c90f60ddc76e5d76a9958ab52759c75185fc8f8c2547da784566d8f264d5
        • MD5 SHA1 SHA512 SSDEEP

        u.dbv5-journal

        • Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
        • Size 8KB
        • SHA256 1af1fdf7898e0b846d9e4a4ba656da01d855e36713971183695e22662f992a59
        • MD5 SHA1 SHA512 SSDEEP

        u.dbv5-journal

        • Path /data/data/com.mfqbzs.reader/databases/u.dbv5-journal
        • Size 12KB
        • SHA256 db9be538138b09871404a931bc0d2325f2a76437bd02b62e3996bf5986e92649
        • MD5 SHA1 SHA512 SSDEEP

        .jg.ac

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 33358cc194f107aa52c479750c31a10904507bde9b956aeb04a0c3f89bd70acc
        • MD5 SHA1 SHA512

        .jg.ac

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 a8a94379ec004cfbd457767dcd516667a024e428b4c9f4d1a5af9c3eada51b50
        • MD5 SHA1 SHA512

        .jg.di

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 a49578b88d87103dbce0c545ca7254496b277d4ec3ad56f188aab2e84190f8c1
        • MD5 SHA1 SHA512

        .jg.di

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.di
        • Size 340B
        • SHA256 68be5322777b3ea2cb4606cf46d0bc3952ad2b485284af8d37d8068385ad1e76
        • MD5 SHA1 SHA512

        .jg.ic

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ic
        • Size 40B
        • SHA256 394a02bb2c0488812c07ef7c5e9ae7d280d89a1e0324e3588c3e80cc82c429e2
        • MD5 SHA1 SHA512

        .jg.rd

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.rd
        • Size 32B
        • SHA256 cb2ab478fd74678a2d9432f21381833e0045c023330209ef6cd7d4ab34f25c6b
        • MD5 SHA1 SHA512

        .jg.ri

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.ri
        • Size 314B
        • SHA256 fbc6f928bd771ac39e8697321e60765f122c107b555bf5301a305d05022cb1ff
        • MD5 SHA1 SHA512

        .jg.store

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.store
        • Size 32B
        • SHA256 55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
        • MD5 SHA1 SHA512

        .jg.store

        • Path /data/data/com.mfqbzs.reader/files/.jglogs/.jg.store
        • Size 127B
        • SHA256 b11f3904daa2910b2727a89c915a36418124a1b9d717abaab2f8d5af83cfd7c3
        • MD5 SHA1 SHA512

        .jiagu.lock

        • Path /data/data/com.mfqbzs.reader/files/.jiagu.lock
        • Size 27B
        • SHA256 5796106d0b075b6860fdca3e23fb2272b1ca1e25974b37a972f4f0b44476c108
        • MD5 SHA1 SHA512

        __local_ap_info_cache.json

        • Path /data/data/com.mfqbzs.reader/files/__local_ap_info_cache.json
        • Size 2B
        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
        • MD5 SHA1 SHA512

        __local_last_session.json

        • Path /data/data/com.mfqbzs.reader/files/__local_last_session.json
        • Size 129B
        • SHA256 4a039701a07f1a1e3b8a027538b484a92219b3109c6b2882b178b62aff453461
        • MD5 SHA1 SHA512

        __local_stat_cache.json

        • Path /data/data/com.mfqbzs.reader/files/__local_stat_cache.json
        • Size 484B
        • SHA256 f153d96e464f07b569b2b2b3bb606cca1e771a3871e8edf0e108037909753066
        • MD5 SHA1 SHA512

        __send_data_1718599293010

        • Path /data/data/com.mfqbzs.reader/files/__send_data_1718599293010
        • Size 520B
        • SHA256 76af15ecc0c9800377cebe71b463bdd661cf3160f54fdf5ac27b3222c3cd896b
        • MD5 SHA1 SHA512

        jpush_stat_cache.json

        • Path /data/data/com.mfqbzs.reader/files/jpush_stat_cache.json
        • Size 119B
        • SHA256 5118b1e2003d072af1f985e54d3a848eb1dec21b7c8da9f93df94ded3e9b7180
        • MD5 SHA1 SHA512

        13dbee0b-53af-450c-a081-6c88c76569be

        • Path /data/data/com.mfqbzs.reader/files/jpush_stat_history/active_user/nowrap/13dbee0b-53af-450c-a081-6c88c76569be
        • Size 159B
        • SHA256 968bd9d2528931b6dfac95e5aacee72db2f61fc199150421fc686e6d53fcf67c
        • MD5 SHA1 SHA512

        f6abb301-66bd-4ea8-9dcc-7120684bf137

        • Path /data/data/com.mfqbzs.reader/files/jpush_stat_history/normal/nowrap/f6abb301-66bd-4ea8-9dcc-7120684bf137
        • Size 187B
        • SHA256 b3f9f91f27769ff40c4fcc75dbd7fea68c941a066282c24da957b4e6b828e605
        • MD5 SHA1 SHA512

        user_log_0_d3543_1718599422294

        • Path /data/data/com.mfqbzs.reader/files/user_log_0_d3543_1718599422294
        • Size 481B
        • SHA256 a6e92a1f9dc540a03beb0d9139c91d17b81890e53c8c900c1e681495bcdd06ec
        • MD5 SHA1 SHA512
        • Path /data/user/0/com.mfqbzs.reader/[email protected]
        • Size 6.2MB
        • SHA256 401c07f0e4920106d6038ec7efb1dd7bf2cb27570786c26bb803ff668ac04ef2
        • MD5 SHA1 SHA512 SSDEEP

        [email protected]!classes2.dex

        • Path /data/user/0/com.mfqbzs.reader/[email protected]!classes2.dex
        • Size 4.9MB
        • SHA256 5a3c371cfbaf87530ec097a2d6c1822e21654666abfee6e0ce0e43f7296ff2b1
        • MD5 SHA1 SHA512 SSDEEP

        .icosc

        • Path /storage/emulated/0/.zp/.icosc
        • Size 34B
        • SHA256 d7eea261cd91b929390ce44df294438cd72bf0a5ba9157e9ff72e2aa3fd004e2
        • MD5 SHA1 SHA512

        .deviceId

        • Path /storage/emulated/0/360/.deviceId
        • Size 48B
        • SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
        • MD5 SHA1 SHA512

        .iddata

        • Path /storage/emulated/0/360/.iddata
        • Size 32B
        • SHA256 a148d8aa53f9e06ea05dd37d553e3c129ceda0c24a33c805e751ad55f23e2656
        • MD5 SHA1 SHA512

        .cuid2

        • Path /storage/emulated/0/backups/.SystemConfig/.cuid2
        • Size 109B
        • SHA256 7e5d0952d880827282e82d89d7027c3651b264c077eea0393d4719e95a86f450
        • MD5 SHA1 SHA512

        .confd

        • Path /storage/emulated/0/backups/system/.confd
        • Size 20KB
        • SHA256 2418a7e344c022770996b8db13d3bb83ab784ad167c1c1f40f2689a4c2c30028
        • MD5 SHA1 SHA512 SSDEEP

        .confd

        • Path /storage/emulated/0/backups/system/.confd
        • Size 24KB
        • SHA256 67e386e6ca8398d959d3dbb45f5dc06f205c2cc4f68958d1e4fedfb5c423cae9
        • MD5 SHA1 SHA512 SSDEEP

        .confd

        • Path /storage/emulated/0/backups/system/.confd
        • Size 24KB
        • SHA256 7eec5a25c860ad2f2c499ffa6004e3e38625700d14ea4ad10176744ca76d125e
        • MD5 SHA1 SHA512 SSDEEP

        .confd

        • Path /storage/emulated/0/backups/system/.confd
        • Size 28KB
        • SHA256 52e48e9cb6ffa23d11c9a4aa77d08df22778d6db84b84770b6370961cfbed859
        • MD5 SHA1 SHA512 SSDEEP

        .confd

        • Path /storage/emulated/0/backups/system/.confd
        • Size 36KB
        • SHA256 bdf6d14626c332ee5e680d0f3bd076b27e159fbc55eaaae1c6e34318361e0c4b
        • MD5 SHA1 SHA512 SSDEEP

        .confd-journal

        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 512B
        • SHA256 31a3e3e97764ea6b0a5513c53d6f4048915ce9c37b530f1ff9ca80dbb2a28fef
        • MD5 SHA1 SHA512

        .confd-journal

        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 8KB
        • SHA256 abf80453b22886cbb3446468a070621e37c0feeb911a5dc5b4e37bdb22dd9988
        • MD5 SHA1 SHA512 SSDEEP

        .confd-journal

        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 4KB
        • SHA256 93a4d8b082cd1fc66a4e8c7edbdb97ce7b697fa2073dc697594e2ec01a9678a9
        • MD5 SHA1 SHA512 SSDEEP

        .confd-journal

        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 8KB
        • SHA256 f68c71348e52fc0ddd2192a56d7fa8d92abf64fc66ca704b584ee51edd069979
        • MD5 SHA1 SHA512 SSDEEP

        .confd-journal

        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 8KB
        • SHA256 1b726b0606967348473051d7df3f320f62d1dc09450b265cf7f248f1f2a471d2
        • MD5 SHA1 SHA512 SSDEEP

        .confd-journal

        • Path /storage/emulated/0/backups/system/.confd-journal
        • Size 16KB
        • SHA256 cd7dff574f5265531d00f7ebce16ee9cb09164dd1ba8919b2536e9c670f31a72
        • MD5 SHA1 SHA512 SSDEEP

        .timestamp

        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 25B
        • SHA256 fcf20b402c74cffede88233aee4939380f4b2891673898ba08877409ac78a9fb
        • MD5 SHA1 SHA512

        .timestamp

        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 55B
        • SHA256 427e8c47f736ee0507a7fd7e0f3b172213a3b94efe1664d888f1d61acc66f51e
        • MD5 SHA1 SHA512

        .timestamp

        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 84B
        • SHA256 004af0a5c64f9066f68fa9a70d9070eba1ffd017130f46c0e48169a60296a24e
        • MD5 SHA1 SHA512

        .timestamp

        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 114B
        • SHA256 244f3b215934940db0c327153a513be7622117fdf59cd4327f0ddf6a5a6c0360
        • MD5 SHA1 SHA512

        .timestamp

        • Path /storage/emulated/0/backups/system/.timestamp
        • Size 138B
        • SHA256 f2790ec6ae11fa6dea62d600184a7be2740c6f7f4cd1fb3063fa889e7bc1ba20
        • MD5 SHA1 SHA512

        .push_deviceid

        • Path /storage/emulated/0/data/.push_deviceid
        • Size 32B
        • SHA256 d743b03311fe2d57b87c6aad30ca5922c70269e34134dab9141cba4c78f0453b
        • MD5 SHA1 SHA512

        alipay_msp.apk

        • Path /storage/emulated/0/mfqbzs/cache/alipay_msp.apk
        • Size 748KB
        • SHA256 76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1
        • MD5 SHA1 SHA512 SSDEEP